diff options
Diffstat (limited to 'net-analyzer/snort')
| -rw-r--r-- | net-analyzer/snort/ChangeLog | 8 | ||||
| -rw-r--r-- | net-analyzer/snort/Manifest | 2 | ||||
| -rw-r--r-- | net-analyzer/snort/files/digest-snort-2.4.4 | 5 | ||||
| -rw-r--r-- | net-analyzer/snort/snort-2.4.4.ebuild | 151 |
4 files changed, 165 insertions, 1 deletions
diff --git a/net-analyzer/snort/ChangeLog b/net-analyzer/snort/ChangeLog index b9f71b002569..92c19db31a3f 100644 --- a/net-analyzer/snort/ChangeLog +++ b/net-analyzer/snort/ChangeLog @@ -1,6 +1,12 @@ # ChangeLog for net-analyzer/snort # Copyright 2002-2006 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/ChangeLog,v 1.94 2006/02/20 17:04:29 corsair Exp $ +# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/ChangeLog,v 1.95 2006/03/09 18:01:38 vanquirius Exp $ + +*snort-2.4.4 (09 Mar 2006) + + 09 Mar 2006; Marcelo Goes <vanquirius@gentoo.org> +snort-2.4.4.ebuild: + 2.4.4 version bump for bug 125607, requested by Ken Garland <garlandkr at + gmail dot com>. 20 Feb 2006; Markus Rothe <corsair@gentoo.org> snort-2.4.3-r1.ebuild: Stable on ppc64 diff --git a/net-analyzer/snort/Manifest b/net-analyzer/snort/Manifest index d020122e0b79..2d5408c04ce4 100644 --- a/net-analyzer/snort/Manifest +++ b/net-analyzer/snort/Manifest @@ -5,6 +5,7 @@ MD5 04f9ed946469f7954b6bd27f8f1aca39 files/digest-snort-2.3.3-r1 284 MD5 6ac0e71e30f79ee3c5d01349111b58fe files/digest-snort-2.4.3 271 MD5 5008d92cc4bf98a4c85f0e8eefc5e7de files/digest-snort-2.4.3-r1 340 MD5 5008d92cc4bf98a4c85f0e8eefc5e7de files/digest-snort-2.4.3-r2 340 +MD5 c6c1d14d714e12a439eea27b740366d2 files/digest-snort-2.4.4 340 MD5 d212aff92317ccfae4c2228de5f9e5cb files/snort-2.3.3-log.c.diff 4781 MD5 446f8d2b3435b8a6be738da978670605 files/snort.confd 423 MD5 9c325479975ea9fcb4f62c01407e8194 files/snort.rc6 712 @@ -15,3 +16,4 @@ MD5 07e21fc103de54abc76b35aa1336fa5f snort-2.3.3.ebuild 3974 MD5 f8dcdd412ad06716b7f985744a79c64f snort-2.4.3-r1.ebuild 4398 MD5 469eeaafbf98036877a7fa8f2563ee9c snort-2.4.3-r2.ebuild 4346 MD5 a8bd0014fdd6385b3d99077e993998a3 snort-2.4.3.ebuild 4317 +MD5 469eeaafbf98036877a7fa8f2563ee9c snort-2.4.4.ebuild 4346 diff --git a/net-analyzer/snort/files/digest-snort-2.4.4 b/net-analyzer/snort/files/digest-snort-2.4.4 new file mode 100644 index 000000000000..95e7f46cff7c --- /dev/null +++ b/net-analyzer/snort/files/digest-snort-2.4.4 @@ -0,0 +1,5 @@ +MD5 39d8250f47a33aaec4712e29c0dcd1d0 Community-Rules.tar.gz 11678 +MD5 316f28cf52efeddfd899552f3b26cd8d snort-2.4.0-genpatches.tar.bz2 6475 +MD5 9dc9060d1f2e248663eceffadfc45e7e snort-2.4.4.tar.gz 2825187 +MD5 35d9a2486f8c0280bb493aa03c011927 snortrules-pr-2.4.tar.gz 789097 +MD5 2eeef1a7a040d67c3afaf9d749905e47 snortsam-20050110.tar.gz 29395 diff --git a/net-analyzer/snort/snort-2.4.4.ebuild b/net-analyzer/snort/snort-2.4.4.ebuild new file mode 100644 index 000000000000..192193eb0e4b --- /dev/null +++ b/net-analyzer/snort/snort-2.4.4.ebuild @@ -0,0 +1,151 @@ +# Copyright 1999-2006 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/snort-2.4.4.ebuild,v 1.1 2006/03/09 18:01:38 vanquirius Exp $ + +inherit eutils flag-o-matic autotools + +DESCRIPTION="Libpcap-based packet sniffer/logger/lightweight IDS" +HOMEPAGE="http://www.snort.org/" +SRC_URI="http://www.snort.org/dl/current/${P}.tar.gz + mirror://gentoo/snort-2.4.0-genpatches.tar.bz2 + http://www.snort.org/pub-bin/downloads.cgi/Download/comm_rules/Community-Rules.tar.gz + http://www.snort.org/pub-bin/downloads.cgi/Download/vrt_pr/snortrules-pr-2.4.tar.gz + snortsam? ( mirror://gentoo/snortsam-20050110.tar.gz )" + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="-alpha ~amd64 ~ppc ~ppc64 -sparc ~x86" +IUSE="ssl postgres mysql flexresp selinux snortsam odbc prelude inline sguil" + +DEPEND="virtual/libc + >=dev-libs/libpcre-4.2-r1 + net-libs/libpcap + flexresp? ( ~net-libs/libnet-1.0.2a ) + postgres? ( >=dev-db/postgresql-7.2 ) + mysql? ( >=dev-db/mysql-3.23.26 ) + ssl? ( >=dev-libs/openssl-0.9.6b ) + prelude? ( >=dev-libs/libprelude-0.9.0 ) + odbc? ( dev-db/unixODBC ) + inline? ( + ~net-libs/libnet-1.0.2a + net-firewall/iptables + )" + +RDEPEND="${DEPEND} + dev-lang/perl + selinux? ( sec-policy/selinux-snort ) + snortsam? ( net-analyzer/snortsam )" + +pkg_setup() { + enewgroup snort + enewuser snort -1 -1 /dev/null snort +} + +src_unpack() { + unpack ${A} + cd "${S}" + + if use flexresp || use inline ; then + epatch "${WORKDIR}/2.4.0-libnet-1.0.patch" + fi + + sed -i "s:var RULE_PATH ../rules:var RULE_PATH /etc/snort/rules:" \ + etc/snort.conf || die "sed snort.conf failed" + + if use prelude ; then + sed -i -e "s:AC_PROG_RANLIB:AC_PROG_LIBTOOL:" configure.in \ + || die "sed configure.in failed" + fi + + if use sguil ; then + epatch "${WORKDIR}/2.4.0-spp_portscan_sguil.patch" + epatch "${WORKDIR}/2.4.0-spp_stream4_sguil.patch" + fi + + if use snortsam ; then + cd .. + einfo "Applying snortsam patch" + ./patchsnort.sh "${S}" || die "snortsam patch failed" + cd "${S}" + fi + + einfo "Regenerating autoconf/automake files" + AT_M4DIR=m4 eautoreconf +} + +src_compile() { + local myconf + + # There is no --disable-flexresp, cannot use use_enable + use flexresp && myconf="${myconf} --enable-flexresp" + + use inline && append-flags -I/usr/include/libipq + + econf \ + $(use_with postgres postgresql) \ + $(use_with mysql) \ + $(use_with ssl openssl) \ + $(use_with odbc) \ + --without-oracle \ + $(use_enable prelude) \ + $(use_with sguil) \ + $(use_enable inline) \ + ${myconf} || die "bad ./configure" + + emake || die "compile problem" +} + +src_install() { + make DESTDIR="${D}" install || die "make install failed" + + keepdir /var/log/snort/ + + dodoc doc/* + docinto schemas ; dodoc schemas/* + + insinto /etc/snort + doins etc/reference.config etc/classification.config \ + etc/*.map etc/threshold.conf + newins etc/snort.conf snort.conf + if use sguil ; then + sed -i -e "/^# output log_unified/s:# ::" \ + -e "s:snort.log:snort_unified.log:" \ + "${D}/etc/snort/snort.conf" || die "sed failed" + fi + + newinitd "${FILESDIR}/snort.rc7" snort + newconfd "${FILESDIR}/snort.confd" snort + if use sguil ; then + sed -i -e "s:/var/log/snort:/var/lib/sguil/$(hostname):" \ + -e "/^SNORT_OPTS/s%-u snort%-m 122 -u sguil -g sguil -A none%" \ + "${D}/etc/conf.d/snort" || die "sed failed" + fi + + fowners snort:snort /var/log/snort + fperms 0770 /var/log/snort + + # install rules + dodir /etc/snort/rules + mv "${WORKDIR}"/rules/* "${D}/etc/snort/rules/" +} + +pkg_postinst() { + if use mysql || use postgres || use odbc ; then + einfo "To use a database as a backend for snort you will have to" + einfo "import the correct tables to the database." + einfo "You will have to setup a database called snort first." + einfo + use mysql && \ + einfo " MySQL: zcat /usr/share/doc/${PF}/schemas/create_mysql.gz | mysql -p snort" + use postgres && \ + einfo " PostgreSQL: import /usr/share/doc/${PF}/schemas/create_postgresql.gz" + use odbc && einfo "SQL tables need to be created - look at /usr/share/doc/${PF}/schemas/" + einfo + einfo "Also, read the following Gentoo forums article:" + einfo ' http://forums.gentoo.org/viewtopic-t-399801.html' + fi + einfo + ewarn "Only a basic set of rules was installed." + ewarn "Please add your other sets of rules to /etc/snort/rules." + ewarn "For more information on rules, visit ${HOMEPAGE}." +} |